$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: I/DO7cDu4S+NXangibcP8k6Y9z2nTQSQN8pLbdDP5jk= Subject key identifier: 70:43:2F:E8:93:F9:B9:5F:89:DF:C1:0D:A0:30:BE:9C:E2:E1:A8:C9 Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 15 Signing time: Thu 21 Aug 2025 08:14:29 +0000 Manifest this update: Thu 21 Aug 2025 08:14:29 +0000 Manifest next update: Thu 28 Aug 2025 08:14:29 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: WOEmFLC8aqIlsZf76tyWdfggl/0ByRu1IriLKybTkvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Aug 21 08:14:29 2025 GMT Not After : Aug 28 08:14:29 2025 GMT Subject: CN=68a6d565-a99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:5c:26:4e:73:9c:65:32:61:f0:c7:bf:4d: 19:0e:06:e8:81:7d:08:45:f9:88:37:25:f8:fe:92: 67:02:7d:73:06:cb:ad:37:02:b3:f6:90:63:37:15: 60:be:fa:19:c0:6b:39:1f:e5:fc:82:01:70:26:89: ee:6a:9e:a6:98:de:92:47:1e:b8:0f:73:93:af:2c: 59:84:bb:44:66:1a:e1:a6:20:6f:c4:f9:7f:28:00: 80:9f:9e:c2:a5:f8:b2:b7:75:8c:45:db:1d:73:9d: 24:af:c6:80:3a:7d:7d:1d:72:2e:3f:8e:a4:6a:7e: da:9e:2f:fa:f1:de:16:91:92:a4:3d:cf:e7:37:d7: 1e:7e:f0:2f:a3:af:6a:94:25:60:1e:b2:23:2a:8f: 59:31:d2:e6:1e:42:24:d4:98:2b:c1:bc:35:39:d7: 89:ed:16:46:af:65:7a:92:87:49:24:00:d1:0b:56: 34:1a:84:8d:5d:8c:73:5f:8f:16:64:33:a5:70:b7: 81:1a:95:2e:f4:e9:c0:3d:cd:21:57:ea:25:31:6f: fe:98:03:9b:4e:21:dc:e7:f4:69:fc:d9:c5:47:9e: 29:25:2f:46:ad:4b:55:a8:67:32:cc:96:9c:c9:93: a6:a1:52:82:ac:9b:f4:90:b9:15:40:ea:24:cc:2b: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:43:2F:E8:93:F9:B9:5F:89:DF:C1:0D:A0:30:BE:9C:E2:E1:A8:C9 X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a4:62:1c:88:0d:5a:0b:d1:f5:61:56:87:fc:55:f4:53:23: e5:b9:94:5b:6d:2e:5c:f5:69:f3:9d:ba:a8:40:f9:bc:53:cf: b4:47:0d:3a:21:f0:d1:01:05:83:10:ca:da:0b:d0:0c:89:13: bb:a0:bc:4d:b5:41:27:6d:a2:22:59:86:a3:bc:4d:d3:13:c7: f6:08:13:27:c5:6c:b4:7c:29:bb:06:79:a4:61:fd:50:e8:bb: 38:de:a7:2b:28:f7:07:fe:1d:ea:f6:b3:b5:51:c0:58:b1:6d: 4e:e1:16:d4:21:26:1a:3e:f1:c8:cc:db:0b:c6:0b:ed:2e:49: 83:93:7a:2f:5e:2b:a0:0a:72:bb:7d:fa:5b:6f:33:18:0d:35: 4d:71:ed:5a:2c:31:a1:2b:bb:bf:ec:a7:41:3e:fa:e0:36:dc: 44:78:6e:73:73:81:3b:b4:15:bb:5a:81:e0:f5:1c:07:41:90: 66:fc:2f:1d:78:cc:9c:58:7e:f1:8b:86:6c:fe:c1:3d:87:90: 0c:10:d9:4f:3b:ef:63:0c:ec:d3:2d:46:10:bc:01:44:95:9d: 57:79:fa:0d:36:80:a3:c9:40:a6:bf:e5:ac:ea:bd:97:70:d8: 17:1f:69:e1:47:b9:d7:bf:08:d3:9d:d6:a7:a3:18:ff:dd:be: 36:c6:52:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNTA4MjEwODE0MjlaFw0yNTA4MjgwODE0MjlaMBgxFjAUBgNV BAMTDTY4YTZkNTY1LWE5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiWVwmTnOcZTJh8Me/TRkOBuiBfQhF+Yg3Jfj+kmcCfXMGy603ArP2kGM3FWC+ +hnAazkf5fyCAXAmie5qnqaY3pJHHrgPc5OvLFmEu0RmGuGmIG/E+X8oAICfnsKl +LK3dYxF2x1znSSvxoA6fX0dci4/jqRqftqeL/rx3haRkqQ9z+c31x5+8C+jr2qU JWAesiMqj1kx0uYeQiTUmCvBvDU514ntFkavZXqSh0kkANELVjQahI1djHNfjxZk M6Vwt4EalS706cA9zSFX6iUxb/6YA5tOIdzn9Gn82cVHniklL0atS1WoZzLMlpzJ k6ahUoKsm/SQuRVA6iTMK0UDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcEMv6JP5 uV+J38ENoDC+nOLhqMkwHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABqkYhyIDVoL0fVhVof8VfRTI+W5lFttLlz1afOduqhA+bxTz7RHDToh 8NEBBYMQytoL0AyJE7ugvE21QSdtoiJZhqO8TdMTx/YIEyfFbLR8KbsGeaRh/VDo uzjepyso9wf+Her2s7VRwFixbU7hFtQhJho+8cjM2wvGC+0uSYOTei9eK6AKcrt9 +ltvMxgNNU1x7VosMaEru7/sp0E++uA23ER4bnNzgTu0FbtageD1HAdBkGb8Lx14 zJxYfvGLhmz+wT2HkAwQ2U8772MM7NMtRhC8AUSVnVd5+g02gKPJQKa/5azqvZdw 2BcfaeFHude/CNOd1qejGP/dvjbGUlc= -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:43 2025 by rpki-client